Maxride Privacy Policy

This Privacy Policy outlines the data handling practices of “THE SERVICE,” also referred to as “Maxride” (collectively known as “we,” “us,” or “our”). It pertains to the collection, usage, processing, disclosure, and protection of Personal and/or Business Data obtained through the Maxride Merchant Application and Websites (hereinafter referred to as “App” and “Websites”).

This Privacy Policy extends to all Users, encompassing Merchant Partners, Customers, and Drivers (collectively referred to as “User” or “you”). This policy is an integral component of the Merchant Agreement, accessible on our Website and App. By using our services via the Website or App, Users expressly consent to this Policy, which includes the processing of their Personal and/or Business Data as mandated by applicable laws.

Furthermore, this policy governs the automated collection and processing of private and confidential data, encompassing both individuals and users of the Taxsee Driver application, conducted by Maxride Service, herein referred to as “the service.” It serves as an inseparable and legally binding part of the Sublicense agreement, which can be accessed at https://maxride.net

General Provision

For the purpose of this Privacy Policy, the below listed terms shall be interpreted as follows:

Private Data – Private data encompasses any information, whether directly or indirectly associated with a specific individual (referred to as the private data subject). Additionally, “Personal and/or Business Data” includes any information, whether direct or indirect, pertaining to you as a User of our Website or Apps. This information includes, but is not limited to, details such as your Merchant name, an active WhatsApp account phone number, banking and credit card information (if applicable), email address, Merchant description and category, geographical location, your image, item listings with their respective prices, as well as descriptions and images of the listed items.
User: A person who uses the mobile application through a normal license grant (non-exclusive) and provides the licensor with his own private data.
Service: a person who independently organizes or executes the processing of the private data, also states the goal of such processing and determines the combination of data to be processed and the activities executable on such data
Licensor: A person who has the right to use the website and also use and distribute the mobile application and processes the users’ private data.
The applicant: A natural person who has requested services via the website, mobile, or calling the “service’s” number and has provided his private data for this purpose.
Colleague: A person who independently and with his own means provides transportation services by car, cargo delivery services or loading/unloading activities services to the applicant. The “Service” is not a transportation enterprise and as such does not provide transportation services.
Merchant Partner: A person or an entity, who has expressed his/her/its submission to the agreement and has received the right to use the Merchant App, and therefore shall enjoy the rights given and fulfill the responsibilities in the context of providing food and beverages and/or groceries to fulfill the needs of the Client through their orders from the Mobile App.
Driver Partner: A person who independently and on his/her own volition agrees to provide transportation services by motorbike.
Customer: A person who has requested via our Customer Apps or website, and has provided his/her Personal Data for this purpose.
Request: A request by the applicant for obtaining services from the colleagues.
Service: a person who independently organizes or executes the processing of the private data, also states the goal of such processing and determines the combination of data to be processed and the activities executable on such data.
Website: a complex of computer software and other existing data in the information system that can be accessed through the internet by domain names and/or network addresses. These names and addresses make the recognition of sites on the internet possible. The “service” uses these applications to provide services to the customers. The website address is: https://maxride.net
Maxride Service: is a computer software to be installed on an applicant’s mobile phone and is governed by iOS and Android operating systems and is integrated with the “service’s” software-hardware complex and makes the applicant’s access to the database automatic.
Services: The services are information provided to the applicant by the “service”, in order for the applicant’s request to be accepted, processed and transmitted to the colleagues and the execution of such request be communicated back to the applicant. The subject and methods of providing services will be identified according to the customers’ offers on the site.

When sending a request via the website, mobile application or calling the “service’s” number, the applicant agrees to this policy, including his agreement to the processing of his private data by the “service” in the instances when applicable laws require such agreement.

Data Collection

Personal and/or Business Data may be collected through the normal operation of the Services, such data includes, for example:

Location
In-Apps transaction information (including the payment method)
Chat messages when using our in-Apps communication features
Feedback, ratings and compliments the
User’s device information
Every Personal and/or Business Data which can be captured through User interaction with us.

When we collect Personal and/or Business Data from other sources, we make sure that that data is transferred to us in accordance with applicable laws. The aforementioned sources include:

Referral programs
Our business partners
Publicly available data
Governmental sources of data

When the User register and create an account in our website, we collect and process the following Personal and/or Business Data of Partner:

Merchant name
The registered phone number which is also bound to an active Whatsapp account.
Email
Photo of the User’s shop
Full information on the User’s shop location
Merchant description

In particular, we may collect and process the device data (GPS location, IMEI number) of the User for analysis and administrative purposes.
In the following instances the User’s Personal and/or Business Data will be eliminated by us:

After three years after completion of providing services.
In case the User retracts his/her consent for Processing his/her Personal and/or Business Data.

The elimination of the Personal and/or Business Data will be done in such a way as to be unrecoverable.
In the event that any Personal and/or Business Data of a minor (i.e. individuals under the age of 18) is disclosed to us, you hereby signify your consent to the processing of the minor’s Personal and/or Business Data as a parent or legal guardian of the minor (or your agreement to procure the necessary consent from the minor’s parent or legal guardian) and accept and agree to be bound by this Policy and take responsibility for his or her actions. In the event that you are a minor and intend to provide your Personal and/or Business Data to us, you hereby confirm and acknowledge that you have obtained your parent or legal guardian’s agreement to be bound by this Policy.

Data Usage

Processing of private data: any activity or activities done on private data, with or without automation, including collection, recording, systematizing, saving, storing, organizing (updating, correcting) abstracting, using, communicating (distributing, providing, accessing), making un-private, blocking, deleting and eliminating private data.Automatic processing of private data: processing private data by computer devices.
Providing private data: activities in order to obtain the private data of one person or a group.
Blocking Personal and/or Business Data»: temporary halt in processing of Personal and/or Business Data (excluding instances when processing is necessary to identify Personal and/or Business Data)
Eliminating Personal and/or Business Data»: activities that result in making the existing Personal and/or Business Data unrecoverable and/or result in eliminating the Personal and/or Business Data Storage
The private data information system: the totality of private data in the database and information technologies and technical instruments that make their processing possible.
Cookies: a complex of data sent by the website that is stored on the computer, mobile or other devices that the applicant uses to access the website and is used to store information about the applicant’s activities on the site.
Device ID: unique information that identifies the applicant’s device and is provided by the device itself or the mobile application.

The Personal and/or Business Data Usage

The main purpose of this Privacy Policy between the User and us is for Processing of Personal and/or Business Data of the User, which is listed below.
In general, the User’s Personal and/or Business Data will be used to provide, personalize, maintain and improve our Services. This includes using the Personal and/or Business Data to:

Provide you with the orders
Engage the Driver Partner in providing the Services.
Create, administer and update the User’s account.
Verify the User’s identity.
Process payments.
Offer, obtain, provide or facilitate insurance for the order (if applicable);
Track the progress of the order;
Enable features that personalize your App, such as lists of favorite items according to the Customers
Perform internal operations necessary to provide our Services, including troubleshooting software bugs and operational problems, conducting data analysis, testing and research, monitoring and analyzing usage and activity trends; and
Protect the security or integrity of the Services and any facilities or equipment used to make the Services available.

In Specific, we can use the User’s Personal and/or Business Data for the following purposes:

To identify the User and to register, administer, verify, deactivate, or manage User accounts in the Apps.
To facilitate or enable any verification as we consider necessary before we register the User.
To enable the User to provide its services to the Customer;
To process, facilitate, and complete payments due to User on its services has been provided.
To communicate and send the User information related to the provision of its services, including to relay Customer Request to User and to facilitate User’s acceptance of the Request.
To provide the User with a notification and updates on the Apps or changes to our regulation in accordance with which services are to be provided;
To provide the User with a report in relation to its services which have been provided;
To process and respond to the feedback from the User on the service which the User has provided.
To monitor the User activities, behavior, and demographic data including trends and usage of the various services available on the Apps;
For developing, testing, enhancing, personalizing, maintaining and improving our Apps, website and the Services to satisfy the User;
To ensure the safety and security of our Services and all users. This includes:
- Screening drivers and delivery partners before enabling them to use our Services.
- Verifying your identity when you log in our Apps or Website;
- Using device, location, profile, usage and other Personal and/or Business Data to prevent, detect and combat fraud or unsafe activities;
- Monitoring compliance with our Work Rules, policies; and
- Detecting, preventing and taking necessary measures on potential and/or ongoing criminal activities.
- Sharing Driver Partners and Customers’ location when the Emergency Button is activated.
To resolve customer support issues. For example, we may
- Investigate and address concerns.
- Monitor and improve our customer support responses.
- Respond to questions, comments and feedback and.
- Inform you about steps taken to resolve customer support issues.
To investigate and resolve claims or disputes, or as allowed or required by applicable law.
For testing, research, analysis and product development. This allows us to understand and analyze User needs and preferences, protect your Personal and/or Business Data, improve and enhance the safety and security of our Services, develop new features, products and services, and facilitate insurance and finance solutions.

We can also use your Personal and/or Business Data when we are required, advised, recommended, expected or requested to do so by our legal advisors or any local or foreign legal, regulatory, governmental or other authority. For example, we may use your Personal and/or Business Data to:

Comply with court orders or other legal, governmental or regulatory requirements;
Enforce our Work Rules or other agreements; and
Protect our rights or property in the event of a claim or dispute.

We can use your Personal and/or Business Data for the purposes of advertising and its business partners’ products, services, events or promotions. For example, we may:

Send you alerts, newsletters, updates, mailers, promotional materials, special privileges, festive greetings; and
Notify, invite and manage your participation in our events or activities.

We can notify you about such advertisements by post, short messaging service, in-app engagement, online messaging service as well as push notification, by hand and by email. If you wish to unsubscribe to the processing of your Personal and/or Business Data for marketing and promotions, you may click on the unsubscribe link in the relevant email or message. Alternatively, you may also update your preferences in our App settings. The provision of your Personal and/or Business Data to us is on a voluntary basis. However, if you do not provide your Personal and/or Business Data or if insufficient Personal and/or Business Data is provided to us when requested, this may affect our ability to fulfill the Purposes mentioned above and your ability to enjoy the full range of benefits provided by us under the Services.
We may use the User’s Personal and/or Business Data without consent, by relying on Legitimate Interests or other exemptions provided by the applicable data privacy laws, for purposes such as prevention of fraud.

Private Data

In the processing of private data, the user & applicant is entitled to.

Receive the information about the processing of his private data, including:
- Confirmation of the processing of private data
- Legal basis and the goal of the processing of private data
- The methods and goals used for the processing of private data
- Information about the title and location of the person processing the private data, information about persons (other than the “service’s” & licensor’s employees) who have access to the private data or about persons to whom the private data can be disclosed, by virtue of other agreements or applicable laws.
- Persons to whom the private data can be disclosed, by virtue of other agreements or applicable laws.
- The processed private data and their obtaining source, should there be no other mechanism in the applicable law for providing them.
- The duration of the processing of private data and the duration of their storage
- Knowledge of his rights and methods of enforcing them according to the applicable laws
- Information about transmitting those data over the borders and the instances for doing so.
- Last and first name, the name of the father and the address of the person who is in charge of the processing, if there is or there will be such a person. Other information required by law
Require the service & licensor to complete, block or eliminate the data, if they are incomplete, imprecise, obtained by illegal means or unnecessary for stated goals of the processing and also do the necessary activities required by law to protect his rights.
Suing the service & licensor for commission or omission in a tribunal with jurisdiction regarding personal privacy and personal data or in courts, should the applicant think that the “service”, in the processing of his private data has breached the legal bounds or has prejudiced his personal rights and freedom in any other way. Protecting his rights, including compensation even for moral damages through courts.

In the processing of the private data, the user is obligated to:

Provide the following information upon the request of the user:
- Confirmation of the processing of private data
- Legal basis and the goal of the processing of private data
- The methods and goals used for the processing of private data
- Name and the address of its headquarters, information about persons (other than employees) that have access to private data or persons to whom the private data may be disclosed due to contract or federal legislation.
- The processed private data and their obtaining source, should there be no other mechanism in the applicable law for providing them.
- The duration of the processing of private data and the duration of their storage
- Knowledge of his rights and methods of enforcing them according to the applicable laws
- Information about transmitting those data over the borders and the instances for doing so.
- Last and first name, the name of the father and the address of the person who is in charge of the processing, if there is or there will be such a person.
- Other information required by law.
Implement measures to prevent unauthorized access to the applicant’s private data.
Publish or give access in an unlimited manner to a document that reflects the policy of processing the private data; also giving access to information regarding the execution of privacy policy in processing private data.

The goal of the agreement (second order agreement) between the user and the licensor is to collect and process the user’s private data. The licensor does not pursue any side goals apart from those stated.
The user’s private data is stored in electronic containers and is processed by automated systems for processing private data.

Collects and processes the following and/or Business Data

The User’s Personal and/or Business Data is stored in electronic storage and is processed by automated systems for Processing of Personal and/or Business Data.

Customer (service)
- First name, last name, and the father’s name.
- Date of birth
- The registered phone number
- Residence Address
- Email address
Drivers (licensor)
- First name, last name, and the father’s name.
- Date of birth
- The registered phone number
- Photo
- Serial number and the issuance date of a document that confirms the right to use the vehicle.
- The vehicle’s plate number
- The user’s private data will be eliminated by the licensor in 24 hours from being entered in the mobile application. After registering the user, his private data will not be saved for further used. The licensor will not store, process or use the private data as it is not a private data processing operator.
- The elimination of the applicant’s private data is done in such a way as to be unrecoverable.
Merchant – We collect User’s Personal and/or Business Data when the User voluntarily provides it to us. For example, the User may provide his/her Personal and/or Business Data to us when the User:
- Fills in user profile or registration forms;
- Provides information to assess User’s eligibility to provide Services as a Merchant Partner;
- Interacts with our social media pages;
- Participates in contests or events organized by us; and
- Provides demographic information in surveys.

Personal and/or Business Data Protection

We will take all reasonable efforts legally to protect and secure the User’s Personal and/or Business Data against the processing of Personal and/or Business Data by unauthorized persons and against unlawful processing or other similar risk.We employ the following measures to prevent unauthorized access to the User’s Personal and/or Business Data:

Employs staff in charge of organizing the processing of the private data.
Implement organizational and technical measures to ensure the security of applicant’s private data. Such measures are:
- Identify the security threats in the system while processing the private data.
- Employ a security system for premises that contain the information systems in a way to prevent unauthorized persons from entering said premises.
- Provide for storage of private data containers.
- Confirms the list of persons who have access to private data by virtue of their jobs.
- Uses the necessary means to protect the private data from unauthorized access.
- Evaluates the employed measures.
- Makes the detection of unauthorized access to private data possible.
- Recovers the data that has been deleted or corrupted due to unauthorized access (if such recovery is possible).
- Enforcing strict regulation on the access to Personal and/or Business Data in the system after their processing.
- Control the measures employed for securing the private data and the level of security of information systems.
The transmission of information via the Internet is not completely secure, even though we will do our best to protect the User’s Personal and/or Business Data, we cannot guarantee the security of the User’s Personal and/or Business Data transmitted through any online platform. Thus, any transmission remains at the User’s own risk.

Personal and/or Business Data Disclosure

We require you to share Personal and/or Business Data with the parties for a number of purposes. The parties include:

Other users of Apps or Website. For example, to the User, we may share the Customer’s name and drop-off location of the purchased items, and the Driver Partner’s name, location, and license plate number. We may share your Personal and/or Business Data with your Customer and the Driver Partner who picks up the order, including your name and photo, your location, items list with pictures and description, items’ prices, and your average rating.
Third parties in connection with an order. For example, we may share your location with third parties when a Customer or Driver Partner activates the Emergency Button.
Subsidiaries and affiliates. We share Personal and/or Business Data with our subsidiaries, associated companies, jointly controlled entities and affiliates.
Business partners of PT TPI, We may provide Personal and/or Business Data to our business partners (independently or at your request). This may include:
- Payment processors and facilitators;
- Background check and anti-money laundering service providers.
- Cloud storage providers.
- Marketing partners and marketing platform providers;
- Data analytics providers;
- Insurance and financial providers;
- Partners that integrate with our App or our App integrates with; and
- Partners which we collaborate with to deliver a promotion, competition or other specialized service.

Supplementing & Elimination of Personal and/or Business Data

The User may request us to supplement, block or eliminate the Personal and/or Business Data, if they are incomplete, imprecise, obtained by illegal means or unnecessary for stated goals of the processing. Also, the User can retract his/her consent for processing of that data. This is done through sending of a written request to us with registered mail with the possibility of confirming the delivery or by personal handing in of such requests in the PT TPI premises. The address of our offices is provided on the website. Such requests shall contain the following: The number of the principal identifying document of the User or his/her representative, information regarding the issuance date of such document and its issuer organization, the User’s residence address, information confirming the User and User’s identifying number, or information that confirms in any way the processing of the User’s Personal and/or Business Data, the request for completion, blocking or eliminating of the User’s Personal and/or Business Data or notice for retracting the agreement to process such data, the User’s signature or that of his/her representative. The PT TPI is required to give a justified answer within 30 days since the receipt of such requests or notices.

Payment Information

Payment process for Customer

For the purpose of receiving services provided by the colleagues, the applicant can link a bank card to its Identifying number to pay without cash and through bank cards. This is done independently by the applicant on the mobile application and by filling the following information:
- Bank card number
- Bank card validation duration
- CVV2
Payments without cash via bank cards are done in accordance with regulations of international payment systems, Bank Indonesia and Financial Services Authority of Indonesia (Otoritas Jasa Keuangan) according to the principles of respecting privacy and the security of payment. The security of applicant’s information is ensured by payment card industry data security standards and nobody, not even the “service”, can receive them. Filling the bank card information is done on the protected payment page of the supporting bank that facilitates such payment.

For Drivers – For the purpose of paying the license fee without cash and through bank cards, the user can link a bank card to its Identifying number. This is done independently by the user on the mobile application and by filling the following information:

For the purpose of paying the license fee without cash and through bank cards, the user can link a bank card to its Identifying number. This is done independently by the user on the mobile application and by filling the following information:
- Bank card number
- Bank card validation duration
- CVV2
Payments without cash via bank cards are done in accordance with regulations of international payment systems, Bank Indonesia and Financial Services Authority of Indonesia (Otoritas Jasa Keuangan) according to the principles of respecting privacy and the security of payment. The security of user’s information is ensured by payment card industry data security standards and nobody, not even the licensor, can receive them. Filling the bank card information is done on the protected payment page of the supporting bank that facilitates such payment.
To draw money from the private account, the user provides the licensor information about his open account in a financial institution and other relevant information necessary for wiring money, including the user’s private data. Such information is:
- Identifying number of the financial institution
- The receiver’s account number in the financial institution
- The receiver’s name, last name and father’s name
- Credit card number.
The information provided to the licensor by the user for drawing from the personal account does not grant the licensor any other permission except for discharging money to the user’s account.

Cookies

Cookie files are text files, containing a small amount of data that is sent to your browser and stored on your computer, smart phone, and any other device through which users access the Internet. Cookies send some information to the site at any visit to the site. For example, they allow you to save secure search settings, display helpful advertisements, compute the number of visits per page, register for our services, and protect user information. Cookies maybe cookie files and can be stored on a computer until they are deleted by the user, or may be temporary (which are called periodic cookies), where they remain in computer until the browser is closed. In addition, cookie files are divided into main files (which are generated directly through site visits) and sub-files (created by other sites).

Very necessary cookie files. These cookies are needed to transmit and use the requested services on the website. These cookies are used when registering the applicant and entering the system. Without them, the services requested by the applicant will be unavailable. These cookies are principle files and can be either transient or persistent. Without them, the site won’t work properly.
Exploitation cookies. These cookies will collect data about website usage statistics. They don’t collect the applicant’s private data. All data collected by them are statistical and unidentifiable. The goal of using them is to:
- Obtain the site usage statistics.
- Evaluating the effectiveness of advertising companies.
These cookies can be persistent and transient and they can be principal or secondary cookie files.
Operational cookies. These are used to keep the information provided by the applicant in memory. (For example, applicant’s name, language, and location) These files use anonymous information and do not track the applicant’s activities on other sites. The goal of using them is to:
- Keeping in memory if certain services have been provided to the applicant.
- Improving the quality of cooperation with the site, usually by saving the priorities of the applicant.
These cookies can be persistent and transient and they can be principal or secondary cookie files.
Advertising cookies. These cookies are used to limit visiting advertisements. Also to evaluate the performance of advertising agencies. These cookies are used to manage the advertising content on the site. These cookies are put on the site by third parties, for example by third parties and their agents. They can be persistent or transient. These are related to the advertisement on the site that is provided by third parties.
Blocking or deleting cookies, and limiting their activities can be done through the applicant’s browser’s settings.

Data About Telecommunication Operator

The service & licensor obtains data about telecommunication operators which provides services to the applicant through the mobile application.
Such data does not include User’s & applicant’s private data.
The goal of obtaining such information is to automatically fill in the information about the country of residence of the applicant and choose the language of the applicant’s interface in the setting part of the mobile application.

Request records

The service or licensor saves the route records of the applicant. These records include the time of initiation of the request, the address to which the vehicle arrives, the destination address and the routes taken, the applicable tariff, payment method, and other information provided by the applicant.
The goal of collecting such information is to improve the quality of services through auto-filling the parameters of the request by previously provided information to shorten the request time.

The Acknowledgment, The Consent & Its Withdrawal

By accessing and accepting this Privacy Policy, the User acknowledges to have read, understood and agreed with all the terms of this Privacy Policy. Specifically, the User gives us his/her consent to collect, use, share, disclose, store, transfer, or perform any other type of processing of the User’s Personal and/or Business Data in accordance with this Privacy Policy.
In terms of the User providing us with the Personal and/or Business Data relating to other parties, the User represents and warrants to have obtained any kind of consent from an individual for processing of the other party’s Personal and/or Business Data by us.
The User may withdraw his/her consent for all processing User’s Personal and/or Business Data, by sending us a reasonable notice in writing. As the consequence, the User is unable to use the Apps along with the Service. After the User has chosen to withdraw his/her consent, we may be able to continue to process the User’s Personal and/or Business Data to the extent required or otherwise permitted by applicable laws and regulations.

The User Rights

Without override to the provisions regarding User rights according to applicable laws and regulations, The User is entitled to:

Request the correction and/or (in some cases) deletion of your Personal and/or Business Data;
The confidentiality of the Personal and/or Business Data;
Require us to complete, block or eliminate the data, if they are incomplete, imprecise, obtained by illegal means or unnecessary for stated goals of the processing and also do the necessary activities required by law to protect his rights.

Without override to the provisions regarding Personal and/or Business Data Protection according to applicable laws and regulations, we undertake to:

Protect Personal and/or Business Data from misuse/act of abuse;
Implement measures to prevent unauthorized access to the User’s Personal and/or Business Data.
Maintain the confidentiality of the Personal and/or Business Data obtained, collected, processed, and analyzed;

Geographical Location Information

Both the service and the licensor collect the geographical location of the applicant through the mobile application. However, it’s important to note that this information is only transmitted to either the service or the licensor while the mobile application is in use. Users have the option to prevent this transmission by adjusting their device settings. However, it’s worth mentioning that choosing to disable this feature may limit the functionality of the application.

Jurisdiction & Cross Border Transfer

Your Personal and/or Business Data can be stored and processed in any country, state and city where we have facilities or in which we engage service providers. By using the Apps, you have given your consent to the transfer of information to countries outside your country of residence, which can have data protection rules that are different from Indonesia. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in other countries may be entitled to access your Personal and/or Business Data.

The Change or Updates of This Policy

We shall have the right to modify, update or amend the terms of this Policy at any time by placing the updated Policy on the Websites. This Privacy Policy can be changed and/or renewed from time to time without any prior announcement. We suggest to the User to read carefully and check this privacy policy page periodically in order to be aware of any changes thereto. By accessing and using this application, the User agrees with any changes in this Privacy Policy.

Contacts

If you have any queries or complaints relating to your Personal and/or Business Data, wish to make a request for access or correction of your Personal and/or Business Data, or would like to withdraw your consent in respect of the Personal and/or Business Data being processed by us, you can contact us via email or by phone using the following contact details:

Website: https://maxride.net

The original of this Policy is written in the English language. In the event of any conflict between the English and other language versions, the English version shall prevail.

@ 2023 Mira Global Investments & Trading Pte. Ltd.